Summary British Airways Flight BAW93 was en route from Heathrow, England, to Toronto, Ontario, at flight level (FL)340. Air Canada FlightACA861 was en route from Heathrow to Halifax, NovaScotia, atFL360. United Airlines FlightUAL971 was en route from Milan, Italy, to Washington, United States, atFL350. BAW93 requested and received a clearance from Gander Area Control Centre to climb toFL360. The aircraft climbed toFL360 and, as a result, the required separation between BAW93 and the other two aircraft was lost. The controller subsequently issued a clearance to BAW93 to restore required separation. Ce rapport est galement disponible en franais. Other Factual Information Gander Area Control Centre (ACC) is responsible for air traffic control in the Gander Domestic and Oceanic Flight Information Regions (FIR). The FIR is divided into three areas or specialties: ICAO, high-level domestic, and low-level domestic. As aircraft transit from oceanic to domestic airspace, they enter an adjoining sector in high-level domestic specialty. At the time of the incident, five sectors were operating within the high-level domestic specialty. Traffic density and complexity in the CYMON sector was decreasing at the time of the incident because the westbound flow was nearing the end. The CYMON sector controller had a total of eight years' experience, all in the Gander ACC. He was on his second day of work after four days' leave. He had been on duty for 5hours 40minutes since the beginning of his shift and had been on a 45-minute rest break before taking over the CYMON sector. He had been working this sector for 46minutes before the incident. The incident occurred at 1310 Newfoundland daylight time1, approximately 1hour 50minutes before the end of his shift. The radar data processing system (RDPS) situational display (RSiT) provides high-level controllers with radar target position data, including data tags associated with radar targets. The information presented on the data tags for radar-identified aircraft includes aircraft call sign, altitude, speed, and other related information (known as a full data block). Aircraft that are not radar identified are normally displayed as a splat, which is a star shaped icon (), along with the aircraft's altitude. Aircraft entering the domestic airspace from the oceanic airspace are presented on the controller's display as splats. When the aircraft is assigned a discrete transponder (beacon) code, the air traffic control computer system recognizes the code, changes the target symbol to a different type, and adds a full data block. Depending on traffic density, complexity, and other factors, one or two controllers may be working in the sector. When two controllers are working at a sector, one is responsible for controlling the aircraft using the radar-displayed information, and the other controller is responsible for maintaining the flight progress strips on the flight data board and coordinating with other sectors and units. At the time of the incident, the CYMON sector was staffed by a single controller: the controller was therefore responsible for managing the flight progress strips on the flight data board and for controlling the aircraft utilizing primarily the information displayed on the RSiT. Single staffing of the CYMON sector was considered a normal practice for the density and complexity of traffic at the time of the incident. Paper flight progress strips are used to provide information (such as aircraft call sign, route, airspeed, and altitude) for all aircraft for which the controller has control responsibilities or will have in the near future. Controllers normally receive such flight progress strips automatically at the sector before an aircraft enters their airspace. On initial contact, the controllers confirm the altitude indicated on the flight progress strip and are required to place a check mark on the strip next to the aircraft altitude. When a request for an altitude change is received, the requested altitude is written on the strip and circled. When the controller issues the clearance to climb and .the clearance has been acknowledged, a slash is drawn through the circled altitude and the cleared altitude is written beside the slash. The flight progress strip for BAW93 did not indicate that a climb to FL360 had been issued by the CYMON sector controller. BAW93, a Boeing 747, was en route at FL3402 with a routing of 51north, 50west3 at 1304, estimating the CYMON reporting point at 1330. ACA861, a Boeing767, was en route at FL360 with a routing of 51north, 50west at 1306, estimating CYMON at 1332. UAL971, a Boeing767, was en route at FL350 with a routing of 51north, 50west at 1307, estimating CYMON at 1334. At approximately 1309, the CYMON sector controller radar identified BAW93 and cleared the aircraft direct to the MIILS reporting point. The CYMON sector controller asked the crew for their requested altitude, and BAW93 requested FL360. The CYMON sector controller wrote the requested altitude on the flight progress strip, circled the altitude, and then cleared the aircraft to FL360. BAW93 read back the clearance to climb and commenced the climb at 1310:15. The CYMON sector controller did not normally clear an aircraft to the requested altitude immediately after initial contact. His normal practice was to complete a conflict check of all other traffic in the area before issuing a clearance to change altitudes. At the time BAW93 was cleared to FL360, neither ACA861 nor UAL971 were communicating with the CYMON sector controller. The targets for ACA861 and UAL971 were being displayed as splats and were not radar identified. The radar target for ACA861 overlapped the radar target of BAW93 at the time the clearance to climb was issued. No form of separation was applied between ACA861 and BAW93. Because ACA861 was within 1nautical mile (nm) of BAW93, and UAL971 was only two minutes or 16nm in trail, when BAW93 commenced climbing, there was a loss of separation between BAW93 and UAL971, and then between BAW93 and ACA861. The required separation minima was 10 minutes longitudinal or 1000 feet vertical. As BAW93 changed course toward MIILS and started its climb, the tracks between ACA861 and BAW93 started to diverge, and their radar target symbols could be distinguished on the CYMON sector controller's display. Both aircraft had traffic alert and collision-avoidance systems (TCAS) installed; however, neither BAW93 nor ACA861 received a TCAS alert or advisory. During the climb, the crew of BAW93 had ACA861 in sight, and there was no risk of collision. When BAW93 levelled at FL360, the CYMON sector controller saw the conflict and asked the crew of BAW93 to confirm their altitude. The CYMON sector controller did not remember issuing the clearance for BAW93 to climb to FL360. The spacing between the two aircraft was 0.9nm. The CYMON sector controller took action to re-establish separation between the aircraft by clearing BAW93 to turn right 15degrees and to climb to FL370. He then notified his supervisor, who confirmed the loss of separation. The CYMON sector controller then was replaced by another controller in accordance with standard operating procedures. The radar targets for BAW93 and ACA861 were approximately 1nm apart at the time the two aircraft entered the CYMON sector. The tracks started to diverge when BAW93 was cleared to proceed direct to MILLS intersection. On the range scale that the CYMON sector controller was using on the RSiT, the two targets would overlap each other. The altitude returns on the two aircraft were inconsistently displayed because of the secondary radar beacon code garbling.4 The overlap of aircraft targets is a common occurrence in this airspace, because aircraft often enter the high-level domestic sectors from the oceanic sector with little or no lateral or longitudinal spacing but with the appropriate vertical spacing. Conflict-alert systems assist air traffic controllers in avoiding loss-of-separation situations between aircraft. Conflict alert is a function of the RDPS, which examines radar tracks for potentially conflicting traffic. Radar tracks are evaluated to determine if separation standards will be compromised within a specified time. When necessary, alerts are sent to the radar display in two stages. Sixty seconds before loss of separation is predicted, a traffic alert is generated. If separation is actually lost, a conflict alert is generated. At the time of the incident, no functioning conflict-alert system was installed at the Gander ACC.5